Guide

Signatures Medicare accepts — and the attestation fix

Summary

Medicare requires every service to be authenticated by the author — a legible handwritten signature or a valid electronic one that identifies who performed or ordered it. A signature stamp is generally not accepted. When a note is unsigned or the signature is illegible and records are reviewed, a signature attestation statement can cure it: a signed, dated statement affirming the author wrote that entry. It authenticates an existing note; it does not let you create documentation after the fact.

By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.

What Medicare accepts as a signature

Every service Medicare pays for must be authenticated by the author — a legible handwritten signature or a valid electronic signature showing who performed or ordered it 1. The signature is what ties the documentation to a person and says they stand behind it. A missing or illegible signature is not a formatting nitpick: in a records review it can make an otherwise complete note fail to support the service 1.

A signature stamp is generally not accepted as authentication 1. And "signed" means the note is complete and attributed — a draft left unsigned in the record is unauthenticated no matter how thorough its content.

Electronic signatures — what makes one valid

An electronic signature counts when the system attributes it to the author, dates it, and prevents alteration after signing 1. The familiar "Electronically signed by [name], [date]" line is the pattern, and the signer must be the person who furnished or ordered the service. What Medicare is checking is authenticity: that a specific, identified clinician signed this specific entry, at a known time, and that it was locked afterward 1.

Configuration matters more than the label. An EHR that lets a note sit in a "pending" state, or that reassigns authorship loosely, can produce entries that look signed but do not authenticate. Your MAC's signature article spells out how it evaluates electronic signatures in its jurisdiction 3.

The attestation fix: curing a missing signature

When a note is unsigned or the signature is illegible and records are requested, Medicare allows a signature attestation statement — a signed, dated statement by the author affirming that they authored the specific entry 1. It authenticates an entry that already exists; it does not let you write documentation after the fact. Done correctly, it can rescue a claim that would otherwise fail review for a signature deficiency 1.

There are limits. Attestation cannot supply a signature the rules required at the time of service for certain orders, and it cannot backfill missing content 2. A related tool is a signature log: a reference that matches an author's illegible initials to a printed name and credential, so a reviewer can read who signed 1. The operative instruction for both lives in Medicare's manuals 2.

Where the rule lives — and why your MAC matters

The signature requirements are set in Medicare's manuals — the program-integrity instruction — and your MAC publishes its own signature article applying them in review 23. When a records request cites a signature problem, the MAC's article is the specific standard you are measured against, so the reliable move is to read your own MAC's signature guidance rather than a general summary 34. Different MACs word the operational details differently, even though the underlying rule is common 4.

This is why one clinician's remembered rule of thumb can be wrong for another's jurisdiction. The manual sets the frame; the MAC article is what a reviewer actually opens when your records land on their desk 3.

Why an unsigned note loses an audit

In a records review, an unauthenticated note can be treated as though the service is not supported, even when the clinical content is thorough 1. The signature is the link between the documentation and the person and date behind it, so the note that supports your E/M level, or your order, only counts if it is authenticated 15. This is how signatures decide audits that the underlying care would otherwise have won.

The defensible note is the signed one. Two records can describe identical care; the one that survives review is the one a reviewer can attribute to a specific author on a specific date, because that is what a signature is for 1.

Building the habit so it never bites

The durable fix is to authenticate at the time of service and to configure the record so it happens by default. Signing and dating each encounter as it closes, setting the EHR to attribute and lock signed notes, keeping a current signature log for initials, and periodically checking that every billed encounter has an authenticated author are the operational habits that keep signatures from ever surfacing in a review 12.

If a review does claw back paid claims over a signature gap you cannot cure, the money comes back the same way any overpayment does — refunding Medicare within the deadline once the amount is identified. Telehealth and remote encounters are held to the same authentication standard, so medicare telehealth notes need a valid signature exactly as in-person ones do 1.

Common questions

Yes, when it is valid. An electronic signature authenticates a note if the system attributes it to the author, dates it, and locks it against later alteration. The "Electronically signed by [name], [date]" line is the common form, and the signer must be the clinician who furnished or ordered the service. A note left pending or unsigned in the EHR is not authenticated, however complete its content.

Not by adding a late signature as though it were contemporaneous. What Medicare allows is a signature attestation: a signed, dated statement in which the author affirms they wrote that specific entry. It authenticates an existing note; it does not let you create or backfill documentation after the fact, and it cannot supply a signature that was required on certain orders at the time of service.

It is a signed, dated statement by the author of a record affirming that they wrote a specific entry, used to cure a missing or illegible signature when records are reviewed. It resolves the authentication gap without altering the underlying note. Medicare's manuals set out what a valid attestation contains, and your MAC's signature article shows how it is applied in that jurisdiction.

A rubber-stamp signature is generally not accepted as authentication of a medical record for Medicare purposes. The requirement is a legible handwritten signature or a valid electronic one that identifies the author and locks the entry. If your handwritten initials are hard to read, the fix is a signature log matching them to your printed name and credential, not a stamp.

An unauthenticated note can be treated as not supporting the service, so a claim can be denied or recouped even though the care was appropriate and the content complete. The remedy at review is a signature attestation or signature log, where applicable. The durable fix is authenticating each note at the time of service, since a signature is what links the record to its author.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

  1. 1.Centers for Medicare & Medicaid Services (2023). Complying with Medicare Signature Requirements. CMS Medicare Learning Network (MLN905364). linkThat Medicare requires each service to be authenticated by a legible handwritten or valid electronic signature, what counts as valid (including that a signature stamp is generally not accepted), and how a signature attestation statement or signature log cures a missing or illegible signature in review.
  2. 2.Centers for Medicare & Medicaid Services (2026). Internet-Only Manuals (IOMs). Centers for Medicare & Medicaid Services (CMS). linkThat the operative signature and documentation instructions live in CMS's Internet-Only Manuals, including the limits on what a signature attestation can and cannot cure.
  3. 3.CGS Medicare (2026). CGS Medicare. Medicare Administrative Contractor portal. linkThat a MAC publishes its own signature article applying Medicare's authentication rules in review for its jurisdiction — the specific standard a provider is measured against on a records request.
  4. 4.Novitas Solutions Medicare (2026). Novitas Solutions Medicare. Medicare Administrative Contractor portal. linkThat a MAC publishes jurisdiction-specific signature and documentation guidance, cited alongside another MAC so a reader looks to whichever contractor serves them rather than a single portal.
  5. 5.Centers for Medicare & Medicaid Services (2023). Evaluation and Management Services Guide. CMS Medicare Learning Network (MLN006764). linkThat documentation must support the service billed — an E/M level is selected from documented medical decision making or total time — so an authenticated signature is what makes the supporting note count.

https://www.gale.care/for-providers/mc-signature-requirements · 5 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

Findability, by specialty

How practices like yours get found in local search and AI answers — the honest playbook, per specialty.

SEO for private practices · SEO for AI search / answer engines (all verticals)